The news comes after WordPress.com introduced Model Context Protocol support last year, which allowed AI agents to read your website's content, analytics and settings, but not modify your website.
A popular WP plugin can be abused to take over websites and thousands of sites are vulnerable.